FIPS 140 Under Cisco Global Certifications

Author
Peter Welcher
Architect, Operations Technical Advisor

Just found this very useful page, which has links to the details of FIPS 140-2 compliance for each device supported. I was checking out wireless (controllers and APs)… http://www.cisco.com/web/strategy/government/security_certification/net_business_benefit_seccert_fips140.html

It says Cisco wireless is FIPS 140-2 level 2 compliant, as I read  it. It also specifies the code releases that were certified. It also covers all sorts of other Cisco gear.

If anyone asks, NIST Wireless Security, the last comprehensive doc was Nov 2002 (very old) but that seems replaced by the newer (2007) STIG version 5 release 2. Which says use WPAv2, which may not be good enough for DoD, and that most WLAN is not FIPS 140-2 certified.

Leave a Reply